← Back to search

@dreb/semantic-search

GitHub Actions Scanned 25d ago

Semantic codebase search engine with embedding-based ranking and MCP server

npm ↗
? Not scanned yet

Versions

2.49.0latest
Jul 31, 2026
2.48.0
Jul 31, 2026
2.47.0
Jul 31, 2026
2.46.0
Jul 30, 2026
2.45.4
Jul 27, 2026
+ show 93 moreshow less
2.45.3
Jul 27, 2026
2.45.2
Jul 24, 2026
2.45.1
Jul 24, 2026
2.45.0
Jul 23, 2026
2.44.0
Jul 23, 2026
2.43.3
Jul 19, 2026
2.43.2
Jul 18, 2026
2.43.0
Jul 17, 2026
2.42.0
Jul 17, 2026
2.41.0
Jul 16, 2026
2.40.2
Jul 14, 2026
2.40.1
Jul 14, 2026
2.40.0
Jul 13, 2026
2.39.0
Jul 12, 2026
2.38.1
Jul 10, 2026
2.38.0
Jul 10, 2026
2.37.0
Jul 10, 2026
2.36.1
Jul 10, 2026
2.36.0
Jul 10, 2026
2.35.0
Jul 9, 2026
2.34.3
Jun 29, 2026
2.34.2
Jun 27, 2026
2.34.1
Jun 26, 2026
2.34.0
Jun 26, 2026
2.33.0
Jun 25, 2026
2.32.1
Jun 24, 2026
2.32.0
Jun 24, 2026
2.31.1
Jun 22, 2026
2.31.0
Jun 19, 2026
2.30.1
Jun 19, 2026
2.30.0
Jun 15, 2026
2.29.0
Jun 15, 2026
2.28.0
Jun 12, 2026
2.27.3
Jun 11, 2026
2.27.2
Jun 10, 2026
2.25.4
Jun 8, 2026
2.25.3
Jun 5, 2026
2.25.2
Jun 5, 2026
2.25.1
Jun 5, 2026
2.25.0
Jun 4, 2026
2.24.0
Jun 3, 2026
2.23.0
Jun 2, 2026
2.22.1
Jun 2, 2026
2.22.0
Jun 1, 2026
2.21.1
May 28, 2026
2.21.0
May 28, 2026
2.20.0
May 28, 2026
2.19.3
May 19, 2026
2.19.2
May 15, 2026
2.19.1
May 15, 2026
2.19.0
May 15, 2026
2.18.0
May 14, 2026
2.17.0
May 12, 2026
2.16.0
May 10, 2026
2.15.2
May 9, 2026
2.15.1
May 9, 2026
2.15.0
May 1, 2026
2.14.1
May 1, 2026
2.14.0
Apr 30, 2026
2.13.0
Apr 28, 2026
2.12.1
Apr 22, 2026
2.12.0
Apr 21, 2026
2.11.1
Apr 20, 2026
2.11.0
Apr 17, 2026
2.10.0
Apr 17, 2026
2.9.0
Apr 17, 2026
2.8.0
Apr 17, 2026
2.7.0
Apr 16, 2026
2.6.3
Apr 16, 2026
2.6.2
Apr 15, 2026
2.6.1
Apr 15, 2026
2.6.0
Apr 15, 2026
2.5.2
Apr 14, 2026
2.5.1
Apr 14, 2026
2.5.0
Apr 14, 2026
2.4.5
Apr 13, 2026
2.4.4
Apr 13, 2026
2.4.3
Apr 13, 2026
2.4.2
Apr 12, 2026
2.4.1
Apr 10, 2026
2.4.0
Apr 10, 2026
2.3.0
Apr 10, 2026
2.2.0
Apr 10, 2026
2.1.0
Apr 9, 2026
2.0.7
Apr 9, 2026
2.0.6
Apr 9, 2026
2.0.5
Apr 9, 2026
2.0.4
Apr 9, 2026
2.0.3
Apr 9, 2026
2.0.2
Apr 9, 2026
2.0.1
Apr 9, 2026
2.0.0
Apr 9, 2026
1.18.0
Apr 9, 2026

Tools 7

echo
annotations: none low

Echoes the message back

get_circle
annotations: none low

Returns a circle image for visualization

get_circle_with_description
annotations: none low

Returns a circle image with a text description

double_number
annotations: none low

Doubles a number and returns the result

math_operation
annotations: none low

Perform basic arithmetic operations

calculate
annotations: none low

Evaluate mathematical expressions

calculator
annotations: none low

Perform basic arithmetic operations

Permissions 4

network medium
Server uses network capabilities via: fetch(), http
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, open(), os, path, pathlib
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 83

low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'get_circle' has no annotations annotation_checker · 100%
low
Tool 'get_circle_with_description' has no annotations annotation_checker · 100%
low
Tool 'double_number' has no annotations annotation_checker · 100%
low
Tool 'math_operation' has no annotations annotation_checker · 100%
low
Tool 'calculate' has no annotations annotation_checker · 100%
low
Tool 'calculator' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client ID in aebrer-dreb-90df2a5/packages/ai/src/utils/oauth/openai-codex.ts auth_checker · 85%
high
Hardcoded OAuth client ID in aebrer-dreb-90df2a5/packages/ai/src/utils/oauth/kimi-coding.ts auth_checker · 85%
high
Hardcoded OAuth client ID in aebrer-dreb-90df2a5/packages/coding-agent/examples/extensions/custom-provider-gitlab-duo/index.ts auth_checker · 85%
medium
Vulnerable dependency: extract-zip@2.0.1 (GHSA-jmr9-qjv8-65gv) dependency_analyzer · 95%
high
Hardcoded OAuth client ID in aebrer-dreb-90df2a5/packages/coding-agent/examples/extensions/custom-provider-qwen-cli/index.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 74 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-f269-vfmq-vjvj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-phc3-fgpg-7m6h) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-pr7r-676h-xcf6) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.19.1 (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
medium
Vulnerable dependency: diff@8.0.2 (GHSA-73rr-hh4g-fpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: file-type@21.1.1 (GHSA-5v7r-6r5c-r473) dependency_analyzer · 95%
medium
Vulnerable dependency: file-type@21.1.1 (GHSA-j47w-4g3g-c36v) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.8.2 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.11 (GHSA-55q2-fjhq-7xh7) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.11 (GHSA-c2j3-45gr-mqc4) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.27.4 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/test/block-images.test.ts:60 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/test/block-images.test.ts:101 entropy_analyzer · 75%
medium
High-entropy string (5.80 bits/char) in aebrer-dreb-90df2a5/packages/coding-agent/test/secret-scrubbing.test.ts:256 entropy_analyzer · 51%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/test/image-resize-callers.test.ts:34 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/test/image-resize-callers.test.ts:46 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/test/tools.test.ts:164 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/test/image-processing.test.ts:38 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/test/image-processing.test.ts:40 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/test/image-processing.test.ts:79 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/test/image-processing.test.ts:90 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/test/export-html-images.test.ts:46 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/src/utils/image-convert.ts:24 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/src/utils/image-resize.ts:62 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in aebrer-dreb-90df2a5/packages/coding-agent/src/modes/interactive/components/daxnuts.ts:12 entropy_analyzer · 70%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/coding-agent/examples/extensions/antigravity-image-gen.ts:237 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in aebrer-dreb-90df2a5/packages/coding-agent/examples/extensions/custom-provider-gitlab-duo/index.ts:35 entropy_analyzer · 70%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/tui/src/terminal-image.ts:204 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/tui/src/terminal-image.ts:226 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/tui/src/terminal-image.ts:270 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/tui/src/terminal-image.ts:293 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/dashboard/test/dashboard-images.test.ts:17 entropy_analyzer · 75%
medium
Buffer.from base64 in aebrer-dreb-90df2a5/packages/dashboard/src/server/dashboard-images.ts:114 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: echo manifest_parser · 90%
info
Tool: get_circle manifest_parser · 90%
info
Tool: get_circle_with_description manifest_parser · 90%
info
Tool: double_number manifest_parser · 90%
info
Tool: math_operation manifest_parser · 90%
info
Tool: calculate manifest_parser · 90%
info
Tool: calculator manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (108) manifest_parser · 80%
medium
Hardcoded OAuth client ID in aebrer-dreb-90df2a5/packages/ai/src/utils/oauth/openai-codex.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in aebrer-dreb-90df2a5/packages/ai/src/utils/oauth/kimi-coding.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in aebrer-dreb-90df2a5/packages/coding-agent/examples/extensions/custom-provider-gitlab-duo/index.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in aebrer-dreb-90df2a5/packages/coding-agent/examples/extensions/custom-provider-qwen-cli/index.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 818 components sbom_generator · 100%
high
Generic API Key Assignment found in aebrer-dreb-90df2a5/packages/coding-agent/docs/custom-provider.md secret_scanner · 75%
high
Generic API Key Assignment found in aebrer-dreb-90df2a5/packages/coding-agent/examples/extensions/custom-provider-anthropic/index.ts secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%